files

Shared filesystem and markdown corpus logic for webd and the files service. rooted_read::ReadRoot pins an operator-provisioned root descriptor and opens regular files with Linux openat2, refusing symlinks, escapes and unsupported kernels. There is no path-based fallback.

The corpus model includes surgical frontmatter writes, the canonical Bus header reader, BLAKE3 hashes, UUIDv7 identity, link extraction, reconcile diffs and generic place-scoped filesystem operations. atomic preserves its streamed verification, mode and no-replace contracts; these differ from config's descriptor-relative configuration replacement helpers.

Enable sqlite for index persistence, ingestion and reconciliation. Test with cargo test --locked -p files --features sqlite and cargo test --locked -p files --no-default-features.

Source: libs/files.

Promoted from Dopus's private crate when webd became the second external owner. Both consumers use the same API and tests; there is no second filesystem implementation.